Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Does this work with the new firmware version 2.1.1_0159 exploit? #179

Open
kcajjones opened this issue Jan 21, 2025 · 4 comments
Open

Does this work with the new firmware version 2.1.1_0159 exploit? #179

kcajjones opened this issue Jan 21, 2025 · 4 comments

Comments

@kcajjones
Copy link

A new exploit for firmware version 2.1.1_0159 has been discovered here:
https://github.com/atc1441/ATC_MiThermometer

After flashing the 2.1.1_0159 exploit, can the normal OTA flashing procedure work to get this ZigBee firmware working?

@kcajjones kcajjones changed the title Does this work with the new exploit? Does this work with the new firmware version 2.1.1_0159 exploit? Jan 21, 2025
@devbis
Copy link
Owner

devbis commented Jan 21, 2025

Yes, it should work. After flashing to ATC firmware with that firmware you can convert it to zigbee according to the instructions

@kcajjones
Copy link
Author

When trying to pair the device via bluetooth on Telink Flasher v6.2, I get the following errors:

11:35:34: Searching for devices
11:35:37: Connecting to: ATC_A74026
11:35:40: TypeError: getDevVersion(...).then is not a function
11:35:40: Reconnect 1 from 5
11:35:40: TypeError: getDevVersion(...).then is not a function
11:35:40: Reconnect 2 from 5
11:35:40: TypeError: getDevVersion(...).then is not a function
11:35:40: Reconnect 3 from 5
11:35:40: TypeError: getDevVersion(...).then is not a function
11:35:40: Reconnect 4 from 5
11:35:40: TypeError: getDevVersion(...).then is not a function
11:35:40: Reconnect 5 from 5
11:35:40: TypeError: getDevVersion(...).then is not a function
11:35:40: Something went wrong, too many reconnects

And when trying to connect for a second time:

11:36:53: Searching for devices
11:36:56: Connecting to: ATC_A74026
11:36:56: Disconnected.
11:36:56: NetworkError: GATT Server is disconnected. Cannot retrieve services. (Re)connect first with device.gatt.connect.
11:36:56: Reconnect 1 from 5
11:37:00: TypeError: getDevVersion(...).then is not a function
11:37:00: Reconnect 2 from 5
11:37:00: TypeError: getDevVersion(...).then is not a function
11:37:00: Reconnect 3 from 5
11:37:00: TypeError: getDevVersion(...).then is not a function
11:37:00: Reconnect 4 from 5
11:37:00: TypeError: getDevVersion(...).then is not a function
11:37:00: Reconnect 5 from 5
11:37:00: TypeError: getDevVersion(...).then is not a function
11:37:00: Something went wrong, too many reconnects

@kcajjones
Copy link
Author

kcajjones commented Jan 21, 2025

I used this web flasher tool successfully from the latest (as of 21/01/25) exploited firmware for 2.1.1_0159 https://pvvx.github.io/ATC_MiThermometer/TelinkOTA.html

Flashing the ATC_ota_40000.bin file took a long time (~300 seconds). I then removed the battery and re-inserted. I was then able to connect again and flash the z03mmc.bin file. The flash was a lot faster and rebooted into zigbee pairing mode. It was immediately available and connected to my Home Assistant server via ZHA.

@nikosece
Copy link

I used this web flasher tool successfully from the latest (as of 21/01/25) exploited firmware for 2.1.1_0159 https://pvvx.github.io/ATC_MiThermometer/TelinkOTA.html

Flashing the ATC_ota_40000.bin file took a long time (~300 seconds). I then removed the battery and re-inserted. I was then able to connect again and flash the z03mmc.bin file. The flash was a lot faster and rebooted into zigbee pairing mode. It was immediately available and connected to my Home Assistant server via ZHA.

The same method worked for me. Just finished!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants